CVE-2026-26399-Disclosure

CVE-2026-26399: ArduinoCoreSTM32（旧バージョン）におけるスタックベースのUse-After-Return 概要 ArduinoCoreSTM32 のバージョン 1.7.0 より前の旧バージョンには、スタックベースのuse-after-returnの脆弱性が存在します。 この問題は pwmstart の実装にあり、TIMHandleTypeDef...

POC_CVE-2025-29943_Write-what-where-Condition

StackWarp: CVE-2025-29943 的 PoC 硬件漏洞 StackWarp （CVE-2025-29943）在 AMD 处理器上的概念验证。该漏洞允许主机（hypervisor）上具有管理员权限的攻击者操纵 CPU 流水线的配置，以破坏 SEV-SNP 客户虚拟机内的栈指针，从而导致权限提升和任意代码执行。 📋 漏洞概述 ID: CVE-2025-29943 产品: AMD EPYC 处理器（7003、8004、9004、9005 系列及其嵌入式变体） 受影响架构: AMD Zen 1 至 Zen 5 CWE-ID: CWE-123（Write-what-where 条...

CVE-2026-16827

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer...

CVE-2026-16827

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have a denial-of-service flaw from an uninitialized stack pointer; CVSS 5.9 (Medium), network attack, high complexity. IBM support page referenced. No exploitation details provided in documents.

EUVD-2026-62713

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer...

CVE-2026-16827 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer...

CVE-2026-72215

A flaw was found in the Linux kernel. In 64-bit configurations, when the promprintf firmware entry point is called from a kernel thread other than the initial one, the stack pointer can be incorrectly manipulated by 32-bit firmware code. This incorrect handling of the stack can lead to the kernel...

Linux Distros Unpatched Vulnerability : CVE-2026-72215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initia...

CVE-2026-72028

A flaw was found in the Linux kernel's kretprobe kernel return probe functionality on RISC-V architectures. A local attacker can trigger a kernel crash by attempting to read from the stack within a kretprobe. This occurs because the archrethooktrampoline does not correctly save the original stack...

CVE-2026-72215

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in t...

CVE-2026-72028

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...

CVE-2026-72215

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in t...

CVE-2026-72028

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...

UBUNTU-CVE-2026-72028

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...

CVE-2026-72215

CVE-2026-72215 affects the Linux kernel on MIPS under 64-bit configurations. The issue arises when non-initial kernel threads call firmware entry points; the stack may be placed in XKPHYS 64-bit memory, making the stack pointer effectively 64-bit. Consequently, 32-bit ALU operations by 32-bit fir...

EUVD-2026-58973

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in t...

CVE-2026-72215 MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in t...

CVE-2026-72215 MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in t...

CVE-2026-72028 riscv: probes: save original sp in rethook trampoline

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...

EUVD-2026-58986

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...